rails4 + mongoid + devise remove attr_accessible

As an extra to
https://github.com/RailsApps/rails_apps_composer/pull/233 , avoid copy
user model from the rails3-mongoid-devise repo.
Merge pull request #254 from demental/rails4_devise_mongoid_fix

rails4 + mongoid + devise remove attr_accessible